Awesome, this never occurred to me. Even though it was a very simply hack, you've got to applaud the hackers for thinking outside the box in the first place and going "Hrmm... I wonder if anyone has left their wordpress config as 755? And how can I use that to my advantage?"